feat(con): add hidden submitter contribution and complete awards

.ci/behavior-ownership/partition.v1.json

@@ -884,6 +884,10 @@
       "group": "lifecycle",
       "target": "backend/app/modules/compensation/api/adapter_bindings.py"
     },
+    {
+      "group": "lifecycle",
+      "target": "backend/app/modules/compensation/api/awards.py"
+    },
     {
       "group": "shared",
       "target": "backend/app/modules/compensation/api/instruments.py"
@@ -896,6 +900,10 @@
       "group": "lifecycle",
       "target": "backend/app/modules/compensation/awards/models.py"
     },
+    {
+      "group": "lifecycle",
+      "target": "backend/app/modules/compensation/awards/participant.py"
+    },
     {
       "group": "shared",
       "target": "backend/app/modules/compensation/models.py"
@@ -916,6 +924,10 @@
       "group": "lifecycle",
       "target": "backend/app/modules/compensation/service.py"
     },
+    {
+      "group": "lifecycle",
+      "target": "backend/app/modules/contributions/api/participation.py"
+    },
     {
       "group": "lifecycle",
       "target": "backend/app/modules/contributions/api/policies.py"
@@ -960,6 +972,14 @@
       "group": "lifecycle",
       "target": "backend/app/modules/contributions/records/models.py"
     },
+    {
+      "group": "lifecycle",
+      "target": "backend/app/modules/contributions/records/participant.py"
+    },
+    {
+      "group": "lifecycle",
+      "target": "backend/app/modules/contributions/records/repository.py"
+    },
     {
       "group": "lifecycle",
       "target": "backend/app/modules/contributions/records/schemas.py"
@@ -1629,7 +1649,7 @@
       "target": "backend/scripts/validate_test_lane_evidence.py"
     }
   ],
-  "authority_digest": "f945d1495efbf8c69985a1e50669a5219bc3d8746556fe27c14d8238ba97ba86",
+  "authority_digest": "fdbbf9eb7ded754eb10e532c3a3b811f4af227136fcd2870f7f638405656345b",
   "protected_base_commit": "7676ce4347db0c9694962a9b587a20765e16eac6",
   "schema": "workstream.behavior-ownership-partition.v1"
 }

.commitrail/INDEX.md

@@ -9,13 +9,13 @@ for current product capability.
 | [WS-DB-002](initiatives/WS-DB-002/OVERVIEW.md) | Complete | Shared UUIDv7 record generation, native-UUID relationships and fresh v0.1 baseline; natural-owner retry custody and aligned CI/local setup |
 | [WS-MCP-002](initiatives/WS-MCP-002/OVERVIEW.md) | Planned | Nine tools through WS-MCP-002-03: self-service and administrative reads; 18 tools remain and WS-MCP-002-04 administrative grant mutations are next |
 | [WS-CLI-001](initiatives/WS-CLI-001/OVERVIEW.md) | Planned | Public Go CLI reads and human profile editing delivered through WS-CLI-001-02; role-specific public journeys and binary distribution remain |
-| [WS-ARCH-001](initiatives/WS-ARCH-001/OVERVIEW.md) | Planned | Source storage, inert AUTH contracts, TASK request reservation and hidden exact AUTH preparation are delivered; CON-07/shared acceptance prerequisites are next for the selected automated path, followed by hidden handlers and atomic routing activation. True admission does not depend on CON/shared acceptance. |
+| [WS-ARCH-001](initiatives/WS-ARCH-001/OVERVIEW.md) | Planned | Source storage, inert AUTH contracts, TASK request reservation, hidden exact AUTH preparation and CON-07 hidden participation are delivered; shared acceptance/TASK effects are next for the selected automated path, followed by hidden handlers and atomic routing activation. True admission does not depend on CON/shared acceptance. |
 | [WS-ART-001](initiatives/WS-ART-001/OVERVIEW.md) | Planned | Exact checker input/output custody and packet foundations are delivered; routing integration, remediation and public intake remain. |
-| [WS-AUTH-001](initiatives/WS-AUTH-001/OVERVIEW.md) | Planned | AUTH-19A commitments, TASK request reservation and ARCH-04E2-A hidden strict PREP matching are delivered; the action remains unavailable, with CON-07/shared acceptance, atomic receipt custody and scoped activation still required for the automated path. |
-| [WS-CON-001](initiatives/WS-CON-001/OVERVIEW.md) | Planned | Contribution/award storage is delivered; CON-07 hidden atomic participation follows exact AUTH preparation; production consumption requires genuine authority and retained source receipts. |
+| [WS-AUTH-001](initiatives/WS-AUTH-001/OVERVIEW.md) | Planned | AUTH-19A commitments, TASK request reservation, ARCH-04E2-A hidden strict PREP matching and CON-07 hidden participation are delivered; the action remains unavailable, with shared acceptance/TASK effects, atomic receipt custody and scoped activation still required for the automated path. |
+| [WS-CON-001](initiatives/WS-CON-001/OVERVIEW.md) | Planned | Contribution/award storage and CON-07 hidden source-neutral submitter participation with complete frozen award sets are delivered; production consumption requires shared acceptance/TASK effects, genuine authority, retained source receipts, fulfillment-root ordinals and lifecycle activation. |
 | [WS-AUTH-003](initiatives/WS-AUTH-003/OVERVIEW.md) | Planned | Canonical source facts and disabled lifecycle fencing are delivered; exact lifecycle activation remains tied to the governed consequence. |
 | [WS-POL-003](initiatives/WS-POL-003/OVERVIEW.md) | Planned | Locked policy configuration and inert source commitments are delivered; false-policy activation remains gated by shared acceptance, exact authority, routing and remediation. |
-| [WS-REV-001](initiatives/WS-REV-001/OVERVIEW.md) | Planned | Packet, Review and FinalAcceptance storage are delivered; source receipt custody and shared acceptance participation remain, with human review/revision separately dependency-gated. |
+| [WS-REV-001](initiatives/WS-REV-001/OVERVIEW.md) | Planned | Packet, Review and FinalAcceptance storage plus CON-07 hidden submitter participation are delivered; source receipt custody and shared acceptance/TASK effects remain, with human review/revision separately dependency-gated. |
 | [WS-QUAL-002](initiatives/WS-QUAL-002/OVERVIEW.md) | Planned | Populate subsystem ownership before changed-line mutation work |
 | [WS-QUAL-003](initiatives/WS-QUAL-003/OVERVIEW.md) | Planned | Audit and prune test proof, add missing safety cases, decompose oversized test modules |
 | [WS-XINT-002](initiatives/WS-XINT-002/OVERVIEW.md) | Planned | Remaining ART/AUTH activation edges only |

.commitrail/initiatives/WS-ARCH-001/OVERVIEW.md

@@ -5,9 +5,11 @@ planned router identity. ARCH-04E1B-A delivers caller-owned routing-request and
 future source-identity reservation. ARCH-04E2-A now delivers strict hidden
 resource/preparation matching and a nominal fixed-router adapter through canonical
 PREP. The action remains planned and unavailable, so it issues no handle, allow or
-receipt and writes no source or effect. The selected automated path proceeds to
-CON-07/shared acceptance prerequisites. Mandatory durable custody and its genuine positive
-proof belong to consequence activation (04E2-B), before production consumption. Neither phase may
+receipt and writes no source or effect. The selected automated path now has
+CON-07 hidden submitter participation and complete frozen award-set staging/replay.
+Shared acceptance and TASK terminal effects are next. Mandatory source-receipt
+custody, fulfillment-root ordinal custody and scoped lifecycle activation remain
+required before production consumption. Neither phase may
 commit a standalone allow. The first durable receipt must commit with its full
 governed consequence. Hidden handlers and activation follow as 04E1B-B/04E2-B,
 then live 04E3; true admission does not depend on CON/shared acceptance.
@@ -21,7 +23,11 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
 
 - Disposition: Planned
 - Delivered prerequisite: [ART-07A1](../WS-ART-001/WS-ART-001-07A1.md) supplies
-  metadata-only packet types. REV-03B packets and REV-04A immutable Review source storage are delivered; REV-04B shared FinalAcceptance storage is delivered; CON-03C contribution/award storage and REV-12A1 disabled controller/fence are delivered; hidden AUTH preparation is delivered before CON-07; mandatory persisted custody accompanies the first authorized atomic consequence at 04E2-B. No packet resolver or human runtime is live.
+  metadata-only packet types. REV-03B packets, REV-04A Review storage, REV-04B
+  FinalAcceptance storage, CON-03C contribution/award storage, REV-12A1 disabled
+  fencing, hidden AUTH preparation and CON-07 hidden submitter participation are
+  delivered. Mandatory persisted custody accompanies the first authorized atomic
+  consequence at 04E2-B. No packet resolver or human runtime is live.
 
 - Completed boundary: through 02H, [CP05](WS-ARCH-001-CP05.md), [CP06](WS-ARCH-001-CP06.md), [CP07](WS-ARCH-001-CP07.md), [ARCH-03A](WS-ARCH-001-03A.md), and
   [ARCH-04A consolidation](WS-ARCH-001-04A.md) canonical post-submit contracts/conformance.
@@ -46,9 +52,9 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
   lease packets with normalized live guide ingests; no resolver or byte authority.
   [REV-04A](../WS-REV-001/WS-REV-001-04A.md) adds complete immutable Review, findings, resolutions and completed request storage; no decision runtime.
   [REV-04B](../WS-REV-001/WS-REV-001-04B.md) adds shared FinalAcceptance source
-  storage, without AUTH receipt custody or runtime consumers.
-- Next usable boundary: for the selected automated-acceptance delivery sequence, CON-07/shared acceptance prerequisites using the delivered REV-12A1 disabled fence,
-  plus mandatory same-table acceptance authority hardening before shared
+  storage, without AUTH receipt custody or a production writer.
+- Next usable boundary: shared acceptance/TASK effects using the delivered
+  REV-12A1 fence and CON-07 participant, plus mandatory same-table acceptance authority hardening before shared
   acceptance composition, then ARCH-04E1B/04E2/04E3 and ARCH-04F. Output-file
   authority remains unavailable for the zero-output catalogue.
   [AUTH-18](../WS-AUTH-001/WS-AUTH-001-18.md) delivers public manager activation
@@ -77,12 +83,13 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
   factory or authorization paths.
 
 Delivered [REV-12A1](../WS-REV-001/WS-REV-001-12A1.md) supplies only disabled
-generation-zero controller storage and transaction locking. Acceptance-source AUTH custody,
-CON participation and authorized activation remain separate required work.
+generation-zero controller storage and transaction locking. Acceptance-source
+AUTH custody, shared acceptance/TASK effects and authorized activation remain
+separate work.
 
 This is delivery priority, not a prerequisite of true human admission. Both
 routing branches have delivered request reservation 04E1B-A → delivered AUTH preparation 04E2-A → hidden handlers 04E1B-B → activation 04E2-B → live 04E3; true routing
-can proceed after its own prerequisites without CON-07/shared acceptance or
+can proceed after its own prerequisites without CON/shared acceptance or
 scoped lifecycle activation. False routing adds those requirements. Human final
 acceptance later uses the same authorized shared acceptance/CON operation.
 

.commitrail/initiatives/WS-ARCH-001/planning/CHUNK_MAP.md

@@ -4,9 +4,11 @@
 planned router identity. ARCH-04E1B-A delivers caller-owned routing-request and
 future source-identity reservation. ARCH-04E2-A delivers strict hidden
 resource/preparation matching and a nominal fixed-router adapter through canonical
-PREP while the action remains planned/unavailable. CON-07/shared acceptance
-prerequisites are next for the selected automated path. Mandatory durable custody and its genuine positive
-proof belong to consequence activation (04E2-B), before production consumption. Neither phase may
+PREP while the action remains planned/unavailable. CON-07 hidden submitter
+participation and complete frozen award-set staging/replay are delivered. Shared
+acceptance and TASK terminal effects are next. Mandatory source-receipt custody,
+fulfillment-root ordinal custody and scoped lifecycle activation remain required
+before production consumption. Neither phase may
 commit a standalone allow. The first durable receipt must commit with its full
 governed consequence. Hidden handlers and activation follow as 04E1B-B/04E2-B,
 then live 04E3; true admission does not depend on CON/shared acceptance.
@@ -52,7 +54,7 @@ public intake remains deferred to ARCH-02I.
 | [WS-ARCH-001-04D1](../WS-ARCH-001-04D1.md) | Canonical terminal ART material custody | L1 | Complete; valid retained history preserved; invalid upgrades refused |
 | [WS-ARCH-001-04D2](../WS-ARCH-001-04D2.md) | AUTH exact fixed-service post-submit activation (replaces XINT-06B) | L1 | Complete: exact input, execute and finalize authority; output write/bind remains unavailable |
 | [WS-ARCH-001-04E1A](../WS-ARCH-001-04E1A.md) | Route-neutral immutable source schema and shared accepted-effects types | L1 | Complete; no runtime writer/reader, routing authority, current pointer or effects implementation; false proof is scalar transport only |
-| [WS-ARCH-001-04E](chunks/WS-ARCH-001-04E-canonical-allow-review.md) | TASK current routing: true to canonical `allow_review`, false/pass to shared acceptance | L1 | Both branches: 04E1A/04D2/OUTBOX-02 -> delivered request reservation 04E1B-A -> delivered AUTH preparation 04E2-A -> hidden handlers 04E1B-B -> activation 04E2-B -> live 04E3. False additionally needs CON-07/shared acceptance, mandatory persisted custody at activation, actual obligation custody and scoped lifecycle activation; true does not. False guide activation also requires 04F remediation |
+| [WS-ARCH-001-04E](chunks/WS-ARCH-001-04E-canonical-allow-review.md) | TASK current routing: true to canonical `allow_review`, false/pass to shared acceptance | L1 | Both branches: 04E1A/04D2/OUTBOX-02 -> delivered request reservation 04E1B-A -> delivered AUTH preparation 04E2-A -> hidden handlers 04E1B-B -> activation 04E2-B -> live 04E3. False additionally needs shared acceptance/TASK effects using delivered CON-07 participation, mandatory source-receipt custody, fulfillment-root ordinal custody and scoped lifecycle activation; true does not depend on CON. False guide activation also requires 04F remediation |
 | [WS-ARCH-001-03D](../WS-ARCH-001-03D.md) | Exact activated historical guide through hidden durable intake; obsolete lookup removed | L1 | Complete; hidden exact post-submit materialization, ARCH-04B2 output custody, ARCH-04C execution, ARCH-04D1/04D2 custody/authority and ARCH-04E1A source-only facts/types delivered; public cutover remains deferred |
 | [WS-ARCH-001-04F](chunks/WS-ARCH-001-04F-checker-remediation.md) | Contributor-correctable checker failures and same-lineage admission-backed replacement Submission | L1 | Planned after 04E; replaces XINT-05C, required before public 02I, not before REV begins from `allow_review` |
 

.commitrail/initiatives/WS-ARCH-001/planning/PLAN.md

@@ -5,9 +5,11 @@ planned router identity. ARCH-04E1B-A delivers caller-owned routing-request and
 future source-identity reservation. ARCH-04E2-A delivers strict hidden
 resource/preparation matching and a nominal fixed-router adapter through canonical
 PREP. The action remains planned/unavailable, so no handle, allow, receipt,
-source write or product effect is reachable. CON-07/shared acceptance prerequisites
-are next for the selected automated path. Mandatory durable custody and its genuine positive
-proof belong to consequence activation (04E2-B), before production consumption. Neither phase may
+source write or product effect is reachable. CON-07 hidden submitter
+participation and complete frozen award-set staging/replay are delivered. Shared
+acceptance and TASK terminal effects are next. Mandatory source-receipt custody,
+fulfillment-root ordinal custody and scoped lifecycle activation remain required
+before production consumption. Neither phase may
 commit a standalone allow. The first durable receipt must commit with its full
 governed consequence. Hidden handlers and activation follow as 04E1B-B/04E2-B,
 then live 04E3; true admission does not depend on CON/shared acceptance.
@@ -71,7 +73,7 @@ checker-remediation boundary before public Submission cutover.
 | [ARCH-04E1A](../WS-ARCH-001-04E1A.md) | ARCH-04C/04D2 | Complete: route-neutral immutable TASK source schema/detached facts and source-neutral accepted-effects types; no runtime writer/reader, handlers, current pointer, routing authority, acceptance implementation or REV dependency |
 | ARCH-04E1B-A | ARCH-04E1A, AUTH-19A | Complete: TASK caller-session request/source-identity reservation; no source publication, handler or commit |
 | [ARCH-04E2-A](../WS-ARCH-001-04E2A.md) | ARCH-04E1B-A | Complete: strict AUTH-private resource/request/consequence matcher and nominal fixed-router adapter through canonical PREP; action stays planned/unavailable, with no handle, allow, receipt, source write or effect |
-| ARCH-04E1B-B | ARCH-04E2-A and CON-02B; false additionally CON-07/shared acceptance using delivered storage/fence | Hidden TASK handlers; durable receipt proof follows at exact activation |
+| ARCH-04E1B-B | ARCH-04E2-A and CON-02B; false additionally shared acceptance/TASK effects using delivered CON-07 participation and fencing | Hidden TASK handlers; durable receipt proof follows at exact activation |
 | Scoped XINT-003-08B controller activation | Early existing REV-12A foundation and hidden shared acceptance/writer/observation proof | Existing Operator lifecycle-control action for the bounded shared manifest, not human runtime |
 | ARCH-04E2-B | ARCH-04E1B-B; scoped XINT-003-08B controller activation for false | AUTH exact consequence activation and mandatory receipt custody; genuine allow commits with all governed effects |
 | ARCH-04E3 | ARCH-04E2, ARCH-04D2, AUTH-OUTBOX-02; shared acceptance proof for false | TASK live dispatch/routing composition: true to allow_review, false/pass to shared acceptance when proven |
@@ -112,10 +114,11 @@ new permission requirement.
 Delivered supporting foundations are [ARCH-04B2](../WS-ARCH-001-04B2.md),
 [AUTH-OUTBOX-01/02](../../WS-AUTH-001/planning/PLAN.md#ws-auth-001-outbox-01--unavailable-dispatcher-contract),
 and [CON-02B](../../WS-CON-001/OVERVIEW.md#con-02b-current-dispatcher-contract).
-REV-12A1 delivers disabled controller/fence mechanics. The current delivery
-priority is the false acceptance branch: CON-07 and shared acceptance after
-delivered exact AUTH preparation. Both branches have request reservation 04E1B-A and hidden AUTH preparation
-04E2-A delivered before handlers 04E1B-B, activation 04E2-B and live 04E3; true routing can proceed after its own prerequisites without CON-07 or
+REV-12A1 delivers disabled controller/fence mechanics, and CON-07 delivers the
+hidden source-neutral submitter participant and complete frozen award-set owner.
+The current false-branch priority is shared acceptance and TASK terminal effects.
+Both branches have request reservation 04E1B-A and hidden AUTH preparation
+04E2-A delivered before handlers 04E1B-B, activation 04E2-B and live 04E3; true routing can proceed after its own prerequisites without CON or
 shared acceptance. False adds those participants and scoped lifecycle activation.
 See [ARCH-04E1B/04E2/04E3](chunks/WS-ARCH-001-04E-canonical-allow-review.md#current-bounded-sequence)
 and ARCH-04F. ARCH-04E1A is delivered as the source-only predecessor.